dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260930-rlcm8assdv
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2812	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{DA4AB87D-AB35-46E2-BE1A-AFD499C6FA0A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2760	msedge.exe
2760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5004 wrote to memory of 4700	5004	msedge.exe	90
PID 5004 wrote to memory of 4324	5004	msedge.exe	91
PID 5004 wrote to memory of 2812	5004	msedge.exe	92
PID 5004 wrote to memory of 4324	5004	msedge.exe	91
PID 5004 wrote to memory of 4324	5004	msedge.exe	91
PID 5004 wrote to memory of 256	5004	msedge.exe	93
PID 5004 wrote to memory of 256	5004	msedge.exe	93
PID 5004 wrote to memory of 2776	5004	msedge.exe	95
PID 5004 wrote to memory of 2776	5004	msedge.exe	95
PID 5004 wrote to memory of 2776	5004	msedge.exe	95
PID 5004 wrote to memory of 2952	5004	msedge.exe	96
PID 5004 wrote to memory of 2952	5004	msedge.exe	96
PID 5004 wrote to memory of 2952	5004	msedge.exe	96
PID 5004 wrote to memory of 3712	5004	msedge.exe	97
PID 5004 wrote to memory of 3712	5004	msedge.exe	97
PID 5004 wrote to memory of 3712	5004	msedge.exe	97
PID 5004 wrote to memory of 4656	5004	msedge.exe	98
PID 5004 wrote to memory of 4656	5004	msedge.exe	98
PID 5004 wrote to memory of 4656	5004	msedge.exe	98
PID 5004 wrote to memory of 4292	5004	msedge.exe	100
PID 5004 wrote to memory of 4796	5004	msedge.exe	101
PID 5004 wrote to memory of 4292	5004	msedge.exe	100
PID 5004 wrote to memory of 4796	5004	msedge.exe	101
PID 5004 wrote to memory of 4800	5004	msedge.exe	103
PID 5004 wrote to memory of 4144	5004	msedge.exe	107
PID 5004 wrote to memory of 2624	5004	msedge.exe	108
PID 5004 wrote to memory of 5840	5004	msedge.exe	109
PID 5004 wrote to memory of 3112	5004	msedge.exe	110
PID 5004 wrote to memory of 3112	5004	msedge.exe	110
PID 5004 wrote to memory of 2760	5004	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff8a19bc188,0x7ff8a19bc194,0x7ff8a19bc1a0
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,6713177789948053925,4224032541513239213,262144 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,6735367058339507915,7653918353373644310,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,2690978543696350819,3617984610835271056,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:13
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3376,i,7417545646673659104,1383732344603157486,2097152 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,3399805961897790836,660343678235538118,2097152 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,18115555547785107242,11903584101066398765,2097152 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:9
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,12710469527412117720,18440169754023645576,2097152 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,15917145890827154360,1778747830087034823,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=3172 /prefetch:14
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,542044096721935379,12417747251976499967,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,15275752154282141776,9025977521916992220,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,15275752154282141776,9025977521916992220,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,8546690649316982874,5648414071367191626,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:14
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,15009776120264942120,15394648465644007604,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,15719530874139458993,7140123525185940227,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,348055766905968021,9529887836157966238,524288 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5656,i,12005491315959178174,6010645501300258948,262144 --field-trial-handle=2408,i,7098806006332087523,13881734961122419595,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9f5cd96d5775331a3a8017e5edfb180f31898a140638266c17a37d1732a9935d
MD5 a9643721449b9827a3e437665713a03f
SHA1 b2602e692454dd3ec069cbe13f4c4f9c12fb57a9
SHA512 4f4d5544f0bae9dcbf339f7998ae0bb02c88a597206b55a373ce8140f5e2982380c12742b11bf644115336acb252355cf58462f8cd6c063588274e6d657aba94
TLSH
T15F71C8A042308146E3533A7436F9596631BF7C8CDEC31E1DD267DBBADA3933094C2058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d5c5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d5c5.TMP
Size 3KB
SHA256 16c7ded80bd272c52586508eaba7c8fdd547c92fbacf61d8b3712db6e368bcaa
MD5 bd9dda503ec1023aabfcca4109c8a1b1
SHA1 aa131a78088b84796d91f95ea2348652f4da734d
SHA512 223d9d78599b1fdfecae680f2b527c29dfc9632b49dcd98951ddc5c564c00a56cc23bf7d90a18842d20bbff944bc66c3ed3e559370dc9f228656e6f66be6bf2c
TLSH
T18C71C8A082308146E3533A7476F9596631BFBC8CDEC31E1DD267DBBADA3933094C2058
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

c7481f17-e1da-4608-942d-f376c5c10223.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c7481f17-e1da-4608-942d-f376c5c10223.tmp
Size 2KB
SHA256 3d1729333b2cf6185fb9b194619b3f57b3a0f6d2fbd719c95b777651bc32c49e
MD5 811162b9c431c6b913da2ad9a33242ea
SHA1 76b478ed5138813bc6681227596b901ebe7cc152
SHA512 19b38e47556df6d92993a704e9b6eedd08441c96030b36e4b593b9866f57bfb4779146c05d3eec776a6661650e071cb405c042aea89eb270cec3ceb28936acaa
TLSH
T12541A0F3C3E8867E891156F4AB146F1BCE1D0915832C3C5689E49E2B93E2471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8897c79f1e34b1f7f0c76f1198cb0fcf4aed0fd760aa886755319a74b2715e4b
MD5 727ed52060127811046540c0a85a6e22
SHA1 cac71dde69bef2fb80e5cded15b56761cf732243
SHA512 68b05d5f866b90490de8e9e34c6853c3abe378e96f7ee820f749174bee9958ed7656c25cdbdd81ca8d409ca9514be57f278b41c4d79b8bda2ac849fec5dc5ab8
SSDEEP 192:sxR8Rbbv/f+sXqmBozoA8p4f/g6+WNIYdqgG0/IgIJ:sxR81v/f+sXHBxG/5I2s
TLSH
T11332A715AD68A97B4CCBE21DBB657F53D2F92032A1D51E48F6FC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 88b782039e4f8eb107157886731113c8ecaa544a46df664860f3596d7bf13080
MD5 f8dce6a717ae431e39939f49c0d62108
SHA1 0c185f3540f8074b74968ad0348bd8c3825af7c5
SHA512 ba8d1c86d8836591a5deadc5577a78af366fec99a883709185c57e3f249ecf5575b2ce54f79bcc36afc331cf009f1614e2dfcde777c095b903077e3ec53f754d
SSDEEP 192:sxR/Rbbv/f+s8qmBozoA8p4f/g6+WNIYdqgG0/IgD+J:sxR/1v/f+s8HBxG/5I2W
TLSH
T16132A615AE68A97B8CCBE21DBB657F53D2F91032A1D51F48B6FC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3f168dbece85aee9066d0dbb9837a4ffc9efc946ab1c5fa581fc6dbe3b178c94
MD5 8f49eaae9e77f8f4abaed39c09972453
SHA1 fe23fcc72359d52a1558f45a603d0c7cf4acb01a
SHA512 d4a55a23626f57c28d0d6af987864d7cafa3c9e0bb35f271a86efedb8ef2be64e7a1057f19ae05c52abdf1405cda0865136b53ff5ab7b30dcd36d7e2b4efcfa2
SSDEEP 192:sxR/Rbbv/f+sZqmBozoA8p4f/g6+WNIYdigG0/IgDEJ:sxR/1v/f+sZHBxG/5I8k
TLSH
T13932B615AD68A97B8CCBE20DBB657F53E2F95032A1D51F48B6FC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e13bbba2796dbe8efcefe865e542250fdf7b8530c5e4719bf77816be2036f175
MD5 bd6dc23cd1101f2d38ef1cc5384e8377
SHA1 47a759b2d75447e1a5dd809897ea565a8b3e2c1b
SHA512 d74daaadea2f398c2c1ffc07a6107a2ae401abe36c3d91ea1d21411c6e73541eba1ad4e2414a96ba87b99035b46adf70b9b4027131e511d2ebce0166569f315d
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLZroKru:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0V9
TLSH
T1C4B2EB2B604DCB7E4FC01A9DAC197F9B6D9802C796588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a6f65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a6f65.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 6e7a31b541ea1d955d92ea77c5d37de0ba3ef3e7440f99677a799a48c0a322f7
MD5 0232450423adbb45e805bf74393c32eb
SHA1 4deffd80735758d0a00c314293144e3c9613078d
SHA512 6f7848027138bc394d361804a6a43fe7ef3205349417fc98d8c9927fea72b00d761fce2f241dddda8181d0aef0023d07c044e752761caf02e2f87548a2b772cd
SSDEEP 768:E/UxvxjgC+C3P0K3ONtag1h3Yogkl5akl8pbHW0AWDuhwkO:xZj3+C3Jg1h3Yog05akl4bHW0AzhwkO
TLSH
T1E913CF35BCA4AE738DE6E244711B6307EFF498275AC55AD445ECDE0E068B2AE030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 4cada30830ad27eadc91f31336b30ce6a4a98c8664dfd90e29d8da460ac337c1
MD5 12e8381cd56326de6c8a3b49fc350d76
SHA1 53e85c4f350dbac69283ecb5652a30ee3ea538c7
SHA512 e3fb379ae11448aa9c5b98cfd9cf4d13f2c5abd16168af2a09b4d496384f0f1b3e74f618647b95fc4def86c94cb3e7fd67258062a8d222207cc0d48d9b517063
SSDEEP 768:sD3L0K3ONtas1h3Yogkl5akl8pbHW0AWDuhwAe:sD31s1h3Yog05akl4bHW0AzhwAe
TLSH
T113F2AF71ECB1DEB35DDAD285B11B6206AFF4D4675AD84AC494ECEB0E01976AE030BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 9d192a41377676c583e8d52c2a9012266f922b25f257ebc8a62e87a06a782005
MD5 0954c9b628cbd3ea6c7c6af9fde39c07
SHA1 5b9b94aa1fe87082f8e034fa8b5211dbebb0b430
SHA512 c64d7d0576480576869aab1f9e077b774d6715812c268f95b149b287d7a6f0467da7b2552cebae824b536a1cdbd626a9438bf29fb4abbdc0fb1dd7c6c9406195
SSDEEP 768:QD300K3ONtas1h3Yogkl5akl8pbHW0AWDuhwAe:QD3Es1h3Yog05akl4bHW0AzhwAe
TLSH
T194F2AF71ECA1DEB35DDAD285B11B6206AFF4D4675AD84AC494ECEB0E01976AE030BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 09b67c0d4395e627c74f9cfb396016e82f9ec30449eee3df82cbe569f8d2127a
MD5 38b971f832de95b0185ad957b5395d7d
SHA1 35f019ab5f5bc9037ce11bd2ac3e1a15aecf5974
SHA512 d9fefe0dad641099c609d00647cb5628e1764e90be9b7dd8e5bfffd64a8c457e7e8fe55eb528b11ccba87eb9ea6c2f9a20fadfe9c4b297b283391efa400c0219
SSDEEP 768:YFQC37wgg0K3ONta21h3Yogkl5akl8pbHW0AWDuhwAe:7C3y21h3Yog05akl4bHW0AzhwAe
TLSH
T16603AF72DCE0DAB79DEAD784B51A3202AFF490679AD49AC491DCDE0E01971ED030FC52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 788a5282ba3b4ac4e90a64b57c98bcb9a7554890669ad14f97ed60a34278551e
MD5 bd1c5d099a6826335f63d9064ae3ad22
SHA1 1457071d35ff46a2e907d9d439203d7089daaca0
SHA512 a61404580b41dfe9ca751adf2b0a4dd38d5efd2d7fc7e9f096b0ea9bae91cd5b92937a35fb6532cbddd8071746e1f5e5dd4eaa1066a2de4cf6dd81e6e812be9e
SSDEEP 768:B/UxvxjgC+CZ3HFK3ONtaN1h3Yogkl5akl8pbHW0AWTSSHvP0Vv:UZj3+I3yN1h3Yog05akl4bHW0ATSCv
TLSH
T12003BF35ECA5AE778DE6A244761AA317FFF494635AC4569445ECAF0E028B3BC030BC53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfb71261-1835-4863-9fe8-33c38e96c296.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dfb71261-1835-4863-9fe8-33c38e96c296.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download